hm seem stuck on researching detailed info if/how osquery 2.0 & 10.12 sierra logs get along as nowadays logs are stored in a DB with macOS? I may missed discussion on how to query these logs in macOS right now.